[Bro-Dev] conn.bro

[Robin Sommer]

On Tue, May 03, 2011 at 14:47 -0400, you wrote:

> > - ts: I'd prefer to keep this the timestamp of the first packet,
> >  that's more well defined.
> 
> Isn't that what c$start_time is?

Sorry, I wasn't clear: I prefer to have c$start_time *logged*.

> This isn't merged yet then?  If not, I'll add it once it's merged.

Correct, working on it.

Thanks!

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org